(Mars 2024) Update VPN CRL

[smerle33]

Service(s)

VPN

Summary

The Jenkins Infra calendar reminds us that the VPN CRL expires the 18th of September 2023.

Todo list for the team member who will take this action:

• Read https://github.com/jenkins-infra/docker-openvpn#howto-review-certificate-revocation-list and check that you have all the pre-requisites
• Open a PR to jenkins-infra/docker-openvpn that updates the CRL - feat(CRL update): Renew revocation list certificateRenew revocation list certificate docker-openvpn#331
• Once the PR is merged, ensures that there is a new version of the container automatically built and released
• Run manually the updatecli build on https://infra.ci.jenkins.io/job/updatecli/job/jenkins-infra/job/production/ to open a PR for deploying the new Docker image to production
• Once deployed, connect to the private.vpn.jenkins.io VM with SSH (requires your public Ip allowed to do that) and ensure that the new CRL is present and updated
• Create a new team calendar event to the date of the next expiration, with alerts 3 weeks before and 2 weeks before

Previous issues: https://github.com/jenkins-infra/helpdesk/issues?q=is%3Aissue+is%3Aclosed+vpn+crl

Reproduction steps

No response

[github-actions]

Take a look at these similar issues to see if there isn't already a response to your problem:

1. 89% (March 2023) Update VPN CRL #3463
2. 83% (April 2022) Update VPN CRL #2885
3. 80% (September 2023) Update VPN CRL #3747
4. 78% (October 2022) Update VPN CRL #3162